ISA 315 paragraph A105 outlines the requirements for the external auditor to evaluate the design and implementation of controls related to the entity's internal control in order to assess the risk of material misstatement. This entails understanding and evaluating the overall design of the control system, the extent to which the controls have been implemented, and the impact of any identified deficiencies on the audit.
